Package Health

@nuxt/nitro-server

Nitro server integration for Nuxt

Latest 4.6.2NPMNPM

88%

Total Score

healthy

Frequent stable releases, strong organization backing, and active maintenance support this release.

Are you affected? Scan for Free

Health Score Breakdown

Dependency profilecaution

The release declares 29 runtime dependencies, a meaningful integration surface but not by itself evidence of poor health.

Repo package mentioncaution

The repository name does not match the package and its README does not mention @nuxt/nitro-server, creating a package-to-source transparency concern; the broader repository tree nevertheless looks consistent with a monorepo.

Workflow auditcaution

All 25 workflows were analyzed with no audit findings; 24 use read-only permissions, while four of 79 action references are unpinned and one workflow has top-level write permissions, leaving a minor hygiene concern.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2026-10949
@nuxt/nitro-server is vulnerable to Authentication Bypass in versions 3.20.0 - 3.21.5 and 4.2.0 - 4.4.5.
3.20.0 - 3.21.54.2.0 - 4.4.5
Medium

Package versions

Maintainers

Direct Dependencies

DependencyLast ReleaseScore
h3
Version ^1.15.11
—
—
ufo
Version ^1.6.4
—
—
vue
Version ^3.5.44
—
—
defu
Version ^6.1.7
—
—
errx
Version ^0.2.2
—
—

Weekly Downloads

Info

Last Published
1 day ago
Created
1 year ago
Unpacked Size
0.2 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform